Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: ZH0rWdheCiIcu/ofyugtwO4XBTI+8RwetG5o/PzyxAI=
Subject key identifier: FF:F6:A3:0A:48:06:4A:9D:F7:8A:18:04:FD:6F:45:55:F3:E5:78:2B
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 0197D662AA2DFB086EB5AF9715E594D7565F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0B32
Signing time: Fri 04 Jul 2025 17:01:19 +0000
Manifest this update: Fri 04 Jul 2025 17:01:19 +0000
Manifest next update: Sat 05 Jul 2025 17:01:19 +0000
Files and hashes: 1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: FSjdu8w6WkvWIiNMvccIUCu46JSdYWzKCIe/wUGnxtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:62:aa:2d:fb:08:6e:b5:af:97:15:e5:94:d7:56:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Jul 4 17:01:19 2025 GMT
Not After : Jul 5 17:01:19 2025 GMT
Subject: CN=fff6a30a48064a9df78a1804fd6f4555f3e5782b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:1f:f5:97:83:a2:9c:71:b6:32:6f:71:29:
08:9c:ae:3b:57:30:cd:b1:c7:4c:fe:ee:b5:e2:5b:
b0:90:a6:48:7d:39:a5:05:62:49:bc:4f:22:72:cb:
7f:d2:e0:9a:29:8a:d0:68:7b:e1:e3:23:3d:0d:89:
f6:10:b8:86:75:a1:32:95:b8:31:98:05:de:c6:dc:
0e:15:e1:8c:c7:fa:3b:d6:73:84:02:f9:30:45:e6:
de:45:90:63:36:70:e7:98:3a:71:5f:2d:37:91:00:
40:ef:08:4b:ea:39:7c:21:7d:ae:e0:33:0d:2a:a5:
ec:18:3c:a3:57:3e:e7:c9:80:9b:3e:2c:38:15:f4:
0e:c5:ba:f8:9b:31:a2:13:db:60:2b:9d:95:f6:3d:
f2:72:7d:70:ab:89:40:32:9a:df:01:65:41:31:54:
f2:19:03:04:87:d2:aa:fe:38:b4:52:06:97:1e:2d:
50:88:88:08:48:3f:ff:0e:bd:46:ca:be:91:8c:5e:
0f:c0:13:14:19:0e:30:e2:b7:44:6e:37:fc:f3:66:
54:a2:2c:ee:32:69:ef:a9:97:5e:cc:ff:8f:fe:88:
64:11:82:b1:ba:5b:83:33:dd:03:6b:d6:93:4a:2a:
2b:92:24:6e:97:10:20:5c:21:27:0d:7f:4b:ac:6e:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F6:A3:0A:48:06:4A:9D:F7:8A:18:04:FD:6F:45:55:F3:E5:78:2B
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:25:99:20:2f:cd:3d:6b:30:ab:ef:43:90:0c:47:95:8e:4a:
89:82:14:38:e4:e3:29:0b:5b:b7:77:18:7e:be:49:82:7e:37:
be:2a:41:c8:ab:f6:43:c7:c9:ed:40:5c:25:e4:88:f5:6d:98:
b4:72:15:5c:38:8a:36:97:63:92:35:88:da:10:92:44:4b:a5:
31:e4:59:20:e3:f0:57:52:5b:d0:3f:43:37:eb:99:23:0d:90:
e4:53:bf:b6:cf:a1:be:b8:fa:e3:9e:df:95:29:0e:0a:ff:36:
76:47:77:fc:bd:80:78:ff:15:b3:61:1f:eb:4d:db:0c:43:bb:
9a:db:63:07:d6:16:b4:90:8e:d8:14:25:00:bb:c8:7f:c4:ce:
75:13:e2:b2:e9:81:80:3e:6a:64:f7:8a:bc:8f:c3:f6:1e:8e:
8f:b4:36:08:13:90:30:86:ae:13:2a:c5:aa:19:a7:5a:80:6b:
cb:90:76:cc:c5:db:07:f2:b6:b4:35:d7:90:b5:53:bf:80:c8:
b2:1d:df:87:e2:90:9a:54:59:b1:07:00:e5:bf:49:83:fa:1f:
61:32:d8:e5:ac:04:cf:b5:02:9e:b4:cf:2a:a1:a5:7c:21:41:
81:98:ec:be:86:22:7e:3a:3a:f3:7f:3e:61:73:ae:8f:a0:d3:
c5:6e:40:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:10:38 2025 by rpki-client